Skip to main content

authentication-setup

Facilitates the design and implementation of secure authentication systems, including JWT, OAuth, and role-based access control.

Install this skill

or
73/100

Security score

The authentication-setup skill was audited on Mar 6, 2026 and we found 15 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 148

Access to .env file

SourceSKILL.md
148const ACCESS_TOKEN_SECRET = process.env.ACCESS_TOKEN_SECRET!;
low line 149

Access to .env file

SourceSKILL.md
149const REFRESH_TOKEN_SECRET = process.env.REFRESH_TOKEN_SECRET!;
low line 436

Access to .env file

SourceSKILL.md
436├── .env.example # environment variable template
medium line 440

Access to .env file

SourceSKILL.md
440### Environment Variable File (.env.example)
medium line 468

Access to .env file

SourceSKILL.md
468- Add .env files to .gitignore
medium line 469

Access to .env file

SourceSKILL.md
469- Provide a list of required variables via .env.example
low line 621

Access to .env file

SourceSKILL.md
621origin: process.env.FRONTEND_URL || 'http://localhost:3000',
low line 621

External URL reference

SourceSKILL.md
621origin: process.env.FRONTEND_URL || 'http://localhost:3000',
low line 640

External URL reference

SourceSKILL.md
640- [JWT.io - JSON Web Token Introduction](https://jwt.io/introduction)
low line 641

External URL reference

SourceSKILL.md
641- [OWASP Authentication Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html)
low line 642

External URL reference

SourceSKILL.md
642- [OAuth 2.0 RFC 6749](https://datatracker.ietf.org/doc/html/rfc6749)
low line 647

External URL reference

SourceSKILL.md
647- [Passport.js](http://www.passportjs.org/) - multiple authentication strategies
low line 648

External URL reference

SourceSKILL.md
648- [NextAuth.js](https://next-auth.js.org/) - Next.js authentication
low line 651

External URL reference

SourceSKILL.md
651- [OWASP Top 10](https://owasp.org/www-project-top-ten/)
low line 652

External URL reference

SourceSKILL.md
652- [NIST Digital Identity Guidelines](https://pages.nist.gov/800-63-3/)
Scanned on Mar 6, 2026
View Security Dashboard